update main.py

kaasislekker

backend/email_service.py

@@ -268,4 +268,96 @@ If you did not request this, you can ignore this email.
             smtp_username,
             smtp_password,
         )
-        smtp.send_message(message)
+        smtp.send_message(message)
+
+def send_password_reset_email(email: str, token: str):
+    smtp_host = os.getenv("SMTP_HOST")
+    smtp_port = int(os.getenv("SMTP_PORT", "587"))
+    smtp_username = os.getenv("SMTP_USERNAME")
+    smtp_password = os.getenv("SMTP_PASSWORD")
+    smtp_from = os.getenv("SMTP_FROM")
+
+    if not all([
+        smtp_host,
+        smtp_username,
+        smtp_password,
+        smtp_from,
+    ]):
+        raise RuntimeError("SMTP configuration is incomplete")
+
+    password_reset_url = (
+        f"https://ben.de-roo.org/api/update-password?token={token}"
+    )
+
+    message = EmailMessage()
+
+    message["From"] = smtp_from
+    message["To"] = email
+    message["Subject"] = "Reset your password"
+
+    message.set_content(
+        f"""Hello,
+
+You requested to use this email address for reseting your Calendar password.
+
+Reset your password using this link:
+
+{password_reset_url}
+
+This link expires after 24 hours.
+
+If you did not request this, you can ignore this email.
+"""
+    )
+
+    with smtplib.SMTP(smtp_host, smtp_port) as smtp:
+        smtp.starttls()
+        smtp.login(
+            smtp_username,
+            smtp_password,
+        )
+        smtp.send_message(message)
+
+def create_password_reset(user_id: int):
+    token = secrets.token_urlsafe(32)
+    token_hash = hash_token(token)
+
+    expires_at = (
+        datetime.now(timezone.utc)
+        + timedelta(hours=1)
+    ).isoformat()
+
+    conn = get_connection()
+    cur = conn.cursor()
+
+    try:
+        cur.execute(
+            """
+            DELETE FROM password_reset_tokens
+            WHERE user_id = ?
+            """,
+            (user_id,),
+        )
+
+        cur.execute(
+            """
+            INSERT INTO password_reset_tokens (
+                user_id,
+                token_hash,
+                expires_at
+            )
+            VALUES (?, ?, ?)
+            """,
+            (
+                user_id,
+                token_hash,
+                expires_at,
+            ),
+        )
+
+        conn.commit()
+
+        return token
+
+    finally:
+        conn.close()